Lucene search
HistoryFeb 12, 2008 - 1:00 a.m.
CVE-2008-0688
cve-2008-0688
xss
catalog.php
smartscript domain trader 2.0
remote attackers
web script
html
viewcategory action
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.6%
Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.
Affected configurations
Node
smartscriptdomain_traderMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| smartscript:domain_trader | smartscript domain trader | eq | 2.0 |
Related
cvelist
cvelist
CVE-2008-0688
2008-02-12 00:00:00
prion
prion
Cross site scripting
2008-02-12 01:00:00
nvd
nvd
CVE-2008-0688
2008-02-12 01:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.6%
Related for CVE-2008-0688